The base idea of the opensearchdescription servlet was to return a address the request was made on.
So, request on http -> return http://
request on https -> return https://
but currently only http is returned.
The proposed fix would return https (only) if https avail/switched on.